SEPPMail Secure E‑Mail Gateway Vulnerabilities Enable Remote Code Execution and Mail Theft

Critical security vulnerabilities have been disclosed in SEPPMail Secure E‑Mail Gateway, an enterprise‑grade email security solution. The flaws could be exploited to achieve remote code execution and enable an attacker to read arbitrary mails from the virtual appliance. Attackers could read all mail traffic or use the gateway as an entry vector into the internal network. The vulnerabilities pose a significant risk to organizations relying on SEPPMail for email protection.

SEPPMail has released a patch that addresses the remote code execution paths and improves input validation. Administrators should apply the update to all SEPPMail appliances immediately. The patch also hardens the appliance against unauthorized mail access. Failure to patch could allow attackers to exfiltrate sensitive communications.